[GitHub] cloudstack pull request #1653: Prevent DNS reflection attacks

2016-08-29 Thread NuxRo
Github user NuxRo closed the pull request at: https://github.com/apache/cloudstack/pull/1653 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is

[GitHub] cloudstack pull request #1653: Prevent DNS reflection attacks

2016-08-22 Thread jburwell
Github user jburwell commented on a diff in the pull request: https://github.com/apache/cloudstack/pull/1653#discussion_r75794286 --- Diff: systemvm/patches/debian/config/opt/cloud/bin/cs/CsAddress.py --- @@ -452,9 +452,9 @@ def fw_vpcrouter(self): self.fw.append(

[GitHub] cloudstack pull request #1653: Prevent DNS reflection attacks

2016-08-22 Thread rhtyd
Github user rhtyd commented on a diff in the pull request: https://github.com/apache/cloudstack/pull/1653#discussion_r75715632 --- Diff: systemvm/patches/debian/config/opt/cloud/bin/cs/CsAddress.py --- @@ -452,9 +452,9 @@ def fw_vpcrouter(self): self.fw.append(

[GitHub] cloudstack pull request #1653: Prevent DNS reflection attacks

2016-08-22 Thread jburwell
Github user jburwell commented on a diff in the pull request: https://github.com/apache/cloudstack/pull/1653#discussion_r75690054 --- Diff: systemvm/patches/debian/config/opt/cloud/bin/cs/CsAddress.py --- @@ -452,9 +452,9 @@ def fw_vpcrouter(self): self.fw.append(

[GitHub] cloudstack pull request #1653: Prevent DNS reflection attacks

2016-08-22 Thread NuxRo
GitHub user NuxRo opened a pull request: https://github.com/apache/cloudstack/pull/1653 Prevent DNS reflection attacks At least in SG zones DNS on the VR is publicly accessible and as such susceptible to DNS amplification/reflection attacks. This fixes it as per https://issues.apac